This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft File: 4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft (raw, json) Hash identifier: jajbrZghBF1Ne10+Lyi7WbyVRLWNTKMP8WxNrwk+TXI= Subject key identifier: D9:03:6F:68:E3:A5:E6:71:7E:AC:02:82:74:C0:4D:8D:05:40:75:38 Authority key identifier: 4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55 Certificate issuer: /CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55 Certificate serial: 7ED6665572FB4DE7717CF6ACA7AA7CAF0D186EC8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft Manifest number: 0356 Signing time: Fri 19 Dec 2025 23:43:56 +0000 Manifest this update: Fri 19 Dec 2025 23:38:56 +0000 Manifest next update: Tue 23 Dec 2025 09:47:56 +0000 Files and hashes: 1: 3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa (hash: ik9rrWYA9D4GBjhetTFAP4k0XQKOPTBWebSo28sOHb8=) 2: 3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa (hash: vUWQBZ0/r7vI2v8KbhMfVsf4gR9LmNP6bUrY9mudCfU=) 3: 3130332e3136382e3235312e302f32342d3234203d3e20313432333237.roa (hash: mP3dXLTjkrRr0prh2Jzplj5CirAMZtpiVu7s//8AY3w=) 4: 4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl (hash: nWsRjnCzR9e2Nn8LuEURXx2pXq6m3CLfN98itY5iCHA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 09:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:d6:66:55:72:fb:4d:e7:71:7c:f6:ac:a7:aa:7c:af:0d:18:6e:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55 Validity Not Before: Dec 19 23:38:56 2025 GMT Not After : Dec 23 09:47:56 2025 GMT Subject: CN=D9036F68E3A5E6717EAC028274C04D8D05407538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ca:c1:96:b1:2a:5d:3c:01:06:ea:49:19:a9: 08:81:d6:b5:e4:01:da:ad:3a:38:8a:ae:8e:5e:e0: ca:72:97:a8:c1:81:7e:57:2f:4e:5b:9c:7d:9f:f4: 7a:a7:94:a8:68:4e:2d:1f:21:10:e4:0d:2f:88:22: b4:d1:fb:8f:3d:56:b9:32:aa:cf:bb:74:d9:a0:ca: 24:e8:1c:b6:88:73:1f:69:fb:8b:15:88:e6:4b:d5: a8:0a:d6:58:8a:8a:24:39:70:c7:c3:45:41:76:6d: 88:3c:0a:f0:ea:c2:e2:49:9e:fc:0d:bd:ce:33:d8: fa:49:65:13:72:49:93:08:87:d1:60:63:8d:23:11: 06:25:56:bb:79:47:84:21:b3:da:95:2f:1f:33:31: 47:80:cb:33:8d:ee:5a:8b:dc:5f:7d:23:fc:0b:e7: bd:7f:92:f7:29:64:bd:66:77:db:fe:59:3d:29:09: 81:09:82:27:1f:8c:33:af:48:ae:af:e5:99:b2:51: c0:92:a9:f5:ea:cb:21:27:1f:f2:a6:bb:71:46:88: 27:ba:9a:89:ea:ec:8e:99:be:53:c6:87:68:42:35: ce:89:f1:3f:c6:67:3d:f6:69:ca:1c:c7:30:c2:fa: 5c:2e:f4:e3:6a:96:43:47:c5:4f:06:d4:6c:58:cf: 15:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:03:6F:68:E3:A5:E6:71:7E:AC:02:82:74:C0:4D:8D:05:40:75:38 X509v3 Authority Key Identifier: keyid:4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:90:c3:13:6c:01:a1:82:02:12:a5:85:84:91:59:ad:11:16: 8f:e5:00:e5:55:9b:21:73:ee:5f:28:c9:03:04:39:85:be:ea: 2b:ab:9e:5f:bf:4a:41:61:40:98:dd:7d:66:a4:4c:ed:53:6b: 17:1d:1a:9c:c7:b9:2f:24:36:02:82:14:c5:c9:e0:d6:32:fc: b8:1b:64:12:d6:b8:36:8c:d2:f8:48:c1:02:fc:1c:38:02:11: fb:a0:06:f2:19:87:09:cb:4e:ce:49:51:78:cc:60:35:e6:f0: 82:88:20:07:cd:20:03:70:e4:e3:38:3d:2d:7b:39:18:20:bb: 20:37:8a:b4:3d:93:bf:9b:23:dd:2a:58:4a:e4:25:01:c9:c5: 8a:42:c0:ce:a7:fe:9a:d2:f1:25:f9:e6:a8:4e:ff:9e:ea:b2: 0f:88:33:8f:dc:22:04:64:85:74:e9:d6:e8:36:02:aa:02:b2: 2d:e8:ca:b9:0a:05:d2:76:48:69:a0:47:1f:50:85:7b:65:53: 84:6f:7d:99:6d:83:28:f2:86:1a:f6:09:bc:7b:67:00:1b:28: 6b:7e:a5:65:64:79:7d:32:fd:ed:6c:bc:37:54:a1:f0:71:6d: 40:fb:36:f1:3e:af:f6:67:c0:e6:ec:a5:50:0a:9c:fb:1d:ce: e1:4e:1c:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUftZmVXL7TedxfPasp6p8rw0YbsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAy NjFFQUE1NTAeFw0yNTEyMTkyMzM4NTZaFw0yNTEyMjMwOTQ3NTZaMDMxMTAvBgNV BAMTKEQ5MDM2RjY4RTNBNUU2NzE3RUFDMDI4Mjc0QzA0RDhEMDU0MDc1MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ysGWsSpdPAEG6kkZqQiB1rXk AdqtOjiKro5e4Mpyl6jBgX5XL05bnH2f9HqnlKhoTi0fIRDkDS+IIrTR+489Vrky qs+7dNmgyiToHLaIcx9p+4sViOZL1agK1liKiiQ5cMfDRUF2bYg8CvDqwuJJnvwN vc4z2PpJZRNySZMIh9FgY40jEQYlVrt5R4Qhs9qVLx8zMUeAyzON7lqL3F99I/wL 571/kvcpZL1md9v+WT0pCYEJgicfjDOvSK6v5ZmyUcCSqfXqyyEnH/Kmu3FGiCe6 monq7I6ZvlPGh2hCNc6J8T/GZz32acocxzDC+lwu9ONqlkNHxU8G1GxYzxUJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2QNvaOOl5nF+rAKCdMBNjQVAdTgwHwYDVR0j BBgwFoAUTulZeYdVzUukB662690xACYeqlUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzhkNTgwYi00NTJlLTQyZDctYjA0MS05MDFkYzMzZDY4NTcvMC80RUU5NTk3OTg3 NTVDRDRCQTQwN0FFQjZFQkREMzEwMDI2MUVBQTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAyNjFF QUE1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDM4ZDU4MGItNDUyZS00MmQ3LWIw NDEtOTAxZGMzM2Q2ODU3LzAvNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMx MDAyNjFFQUE1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKmQwxNsAaGCAhKlhYSRWa0RFo/lAOVVmyFz 7l8oyQMEOYW+6iurnl+/SkFhQJjdfWakTO1TaxcdGpzHuS8kNgKCFMXJ4NYy/Lgb ZBLWuDaM0vhIwQL8HDgCEfugBvIZhwnLTs5JUXjMYDXm8IKIIAfNIANw5OM4PS17 ORgguyA3irQ9k7+bI90qWErkJQHJxYpCwM6n/prS8SX55qhO/57qsg+IM4/cIgRk hXTp1ug2AqoCsi3oyrkKBdJ2SGmgRx9QhXtlU4RvfZltgyjyhhr2Cbx7ZwAbKGt+ pWVkeX0y/e1svDdUofBxbUD7NvE+r/ZnwObspVAKnPsdzuFOHIo= -----END CERTIFICATE-----Generated at Sun Dec 21 10:51:54 2025 by rpki-client